Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File: PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier: 1kEsT0HmaRwd/tNE8OU+A77pxLFY3m2atplfJIBoWRI=
Subject key identifier: AB:95:89:91:56:0D:EC:70:92:6E:3A:69:B8:7F:76:26:88:8A:DD:38
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01A08B689801BAAD9C66CDF62DFD9D7B9A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number: 1455
Signing time: Thu 10 Sep 2026 13:01:22 +0000
Manifest this update: Thu 10 Sep 2026 13:01:22 +0000
Manifest next update: Fri 11 Sep 2026 13:01:22 +0000
Files and hashes: 1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: 7aNGis716SFyTWWAMaPanQXz/xLdz2NbItEvoDSSjSQ=)
3: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
4: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
5: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
6: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
7: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
8: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (hash: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:98:01:ba:ad:9c:66:cd:f6:2d:fd:9d:7b:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Sep 10 13:01:22 2026 GMT
Not After : Sep 11 13:01:22 2026 GMT
Subject: CN=ab958991560dec70926e3a69b87f7626888add38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8a:bb:4d:43:22:cc:dd:f2:dc:e9:c3:1c:26:
d1:96:d4:ba:b3:4f:c8:fd:b6:e5:a6:fe:47:54:68:
b0:a9:7f:47:a7:e8:e5:9e:73:6c:05:a0:1a:04:e9:
87:65:48:26:42:f2:b9:92:3c:f5:dd:38:d3:a6:27:
c8:fb:84:ef:4b:58:43:78:f9:a3:84:6f:9e:3c:86:
d5:af:e3:e3:02:4b:a7:eb:cf:f0:3c:91:3a:12:eb:
40:8a:58:84:b0:39:74:08:e6:6c:38:3b:1e:5b:57:
7e:7d:92:d1:92:2b:28:ce:23:e6:27:7f:ac:44:a9:
9b:1b:5b:46:43:25:5a:fb:fb:6f:f6:99:b5:51:19:
10:ff:f4:7c:41:84:55:78:3f:1a:bf:c7:4b:c9:ac:
10:39:f2:0c:32:2b:1d:8e:12:01:c3:32:8b:e4:f7:
d4:71:6b:14:da:4a:8c:d7:1f:c6:9f:a9:49:e0:c8:
00:f4:d5:24:7c:0e:b6:f7:fb:ac:f3:50:20:3c:3b:
ed:4c:b3:40:9f:8e:0a:fb:5d:1b:4f:23:86:6a:58:
b1:ff:b7:48:e9:93:f6:fd:4f:c5:14:c1:4b:5e:7d:
e7:4d:3f:c0:38:db:5c:da:36:cc:5d:67:47:88:22:
dd:4c:de:40:2f:81:9e:3c:f0:21:66:c5:68:9f:d7:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:89:91:56:0D:EC:70:92:6E:3A:69:B8:7F:76:26:88:8A:DD:38
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7c:1d:59:90:57:b3:b8:c3:97:af:bd:c1:e7:96:28:13:43:
e9:94:5b:6e:83:a5:d3:35:0a:12:66:8b:f5:be:1f:86:85:30:
1b:ed:ff:ad:bb:76:77:26:6b:f3:22:69:ed:12:b2:80:7d:0d:
d9:9f:68:32:77:00:e5:2d:e0:14:07:a7:f1:5d:63:e9:33:f5:
af:ed:3f:0d:b3:66:4b:67:1a:a2:18:24:b8:73:e5:ee:e9:0c:
ac:f6:73:d5:cd:ea:16:94:2b:0d:63:e9:b7:09:12:56:69:17:
a2:ba:9f:64:5f:23:33:b2:2a:52:c7:0e:bf:df:09:80:c7:f6:
67:4f:a3:5f:ad:d1:89:a0:8e:b1:3e:12:3f:24:e8:1a:b9:a8:
45:0d:b7:05:ad:19:02:d2:14:db:c0:69:fa:4b:e6:06:d3:81:
61:f9:9c:c6:39:7b:7e:82:cf:b2:50:48:12:ed:56:bf:db:14:
35:fc:81:6b:34:01:b0:c2:4f:9a:82:bc:18:f8:69:dc:ac:d0:
2c:88:08:2a:53:71:2f:bd:51:83:29:fa:45:cb:d9:a7:55:6c:
d7:5d:55:90:7a:18:d1:67:da:4b:c6:75:c5:54:2d:4b:1d:80:
99:7f:8b:1a:c3:6f:b5:47:a8:fe:1a:55:02:03:a3:06:d9:59:
76:a6:2b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaJgBuq2cZs32Lf2de5qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz
MDQ2NTQwHhcNMjYwOTEwMTMwMTIyWhcNMjYwOTExMTMwMTIyWjAzMTEwLwYDVQQD
EyhhYjk1ODk5MTU2MGRlYzcwOTI2ZTNhNjliODdmNzYyNjg4OGFkZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4q7TUMizN3y3OnDHCbRltS6s0/I
/bblpv5HVGiwqX9Hp+jlnnNsBaAaBOmHZUgmQvK5kjz13TjTpifI+4TvS1hDePmj
hG+ePIbVr+PjAkun68/wPJE6EutAiliEsDl0COZsODseW1d+fZLRkisoziPmJ3+s
RKmbG1tGQyVa+/tv9pm1URkQ//R8QYRVeD8av8dLyawQOfIMMisdjhIBwzKL5PfU
cWsU2kqM1x/Gn6lJ4MgA9NUkfA629/us81AgPDvtTLNAn44K+10bTyOGalix/7dI
6ZP2/U/FFMFLXn3nTT/AONtc2jbMXWdHiCLdTN5AL4GePPAhZsVon9dZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuViZFWDexwkm46abh/diaIit04MB8GA1UdIwQY
MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct
MGZiNDgyM2Y1Yjg3LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3
LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnwdWZBX
s7jDl6+9weeWKBND6ZRbboOl0zUKEmaL9b4fhoUwG+3/rbt2dyZr8yJp7RKygH0N
2Z9oMncA5S3gFAen8V1j6TP1r+0/DbNmS2caohgkuHPl7ukMrPZz1c3qFpQrDWPp
twkSVmkXorqfZF8jM7IqUscOv98JgMf2Z0+jX63RiaCOsT4SPyToGrmoRQ23Ba0Z
AtIU28Bp+kvmBtOBYfmcxjl7foLPslBIEu1Wv9sUNfyBazQBsMJPmoK8GPhp3KzQ
LIgIKlNxL71Rgyn6RcvZp1Vs111VkHoY0WfaS8Z1xVQtSx2AmX+LGsNvtUeo/hpV
AgOjBtlZdqYrug==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:14 2026 by rpki-client